Compliance & Data Privacy Officer

VAS Global; Manila; On-site; PHP 1,200,000 - 1,600,000; Full time

Job summary

VAS Global Services in Manila, Philippines seeks an experienced Compliance & Data Privacy Officer to oversee regulatory compliance and data privacy functions across operations.

The role acts as the primary in-country contact for authorities including the NPC and leads the development, implementation and continuous improvement of compliance and privacy programs.

Qualifications

• Bachelor's degree in Law, Business Administration, IT, or Information Security.
• Minimum 6 years of relevant professional experience in compliance, regulatory affairs, legal practice or data privacy.
• Strong knowledge of Philippine corporate/regulatory requirements and the Data Privacy Act of 2012.
• Experience dealing with government regulators, especially the National Privacy Commission.
• Experience in regulatory compliance, licensing, audits, risk management and statutory reporting.
• Hands-on experience managing data breaches, privacy complaints, and data subject requests.
• Ability to develop and implement privacy/ compliance policies and training programs.
• Strong communication and stakeholder management skills; analytical and problem-solving abilities.
• Certifications in compliance, data protection, or privacy will be an advantage.

Responsibilities

• Oversee regulatory compliance programs including registrations, licenses, and statutory filings.
• Monitor changes in Philippine laws and advise management on implications.
• Serve as in-country point of contact for regulators and authorities.
• Conduct compliance reviews and audits across facilities; ensure corrective actions.
• Maintain compliance risk registers and monitor client and diplomatic requirements.
• Coordinate inspections, audits, and investigations; deliver awareness training.

Skills

Communication

Stakeholder mgmt

Analytical thinking

Problem solving

Education

Bachelor's degree in Law, Business Administration, IT, or Information Security

Job description

VAS Global Services is looking for an experienced Compliance & Data Privacy Officer to join our team in Manila, Philippines.

This is a key role responsible for overseeing the company's regulatory compliance and data privacy functions in the Philippines, ensuring that our operations meet applicable legal, regulatory, licensing and contractual requirements while maintaining strong personal data protection standards.

The successful candidate will serve as the primary in-country point of contact for relevant regulatory authorities, including the National Privacy Commission (NPC), and will oversee the implementation and continuous improvement of the company's compliance and privacy programmes.

Key Responsibilities

Regulatory & Corporate Compliance

• Ensure the company's registrations, licences, permits and statutory filings are maintained and renewed within the required timelines.
• Monitor changes in Philippine laws and regulations and advise management on their operational and compliance implications.
• Act as the primary point of contact for government agencies, regulators and relevant authorities.
• Conduct compliance reviews and audits across Visa Application Centres (VACs), ensuring corrective actions are identified and implemented.
• Maintain compliance risk registers and monitor contractual, client and diplomatic mission requirements.
• Coordinate regulatory inspections, internal and external audits, and compliance investigations.
• Deliver compliance awareness training to employees and management.

Data Privacy & Protection

• Act as the company's registered Data Protection Officer (DPO) in the Philippines and maintain the required registration with the National Privacy Commission.
• Develop, maintain and monitor the company's data privacy policies, procedures, privacy notices, consent processes and records of processing activities.
• Conduct Privacy Impact Assessments (PIAs) for new business processes, systems and third-party vendors.
• Ensure personal data belonging to applicants, employees and clients is handled securely and in accordance with the Philippine Data Privacy Act and applicable regulations.
• Monitor data privacy practices across all centres through regular audits and compliance checks.
• Manage data subject requests, privacy complaints and inquiries within statutory deadlines.
• Lead the response to personal data breaches, including investigation, containment, notification and regulatory reporting.
• Work closely with IT, Security, HR and Operations teams to ensure appropriate data access, retention, storage and disposal controls.
• Deliver data protection awareness and training programmes across the organisation.

Requirements & Qualifications

• Bachelor's degree in Law, Business Administration, Information Technology, Information Security or a related discipline.
• Minimum 6 years of relevant professional experience in compliance, regulatory affairs, legal practice or data privacy, preferably within the Philippines.
• Strong working knowledge of Philippine corporate and regulatory requirements, labour regulations and the Data Privacy Act of 2012, including its implementing rules and regulations.
• Previous experience dealing directly with government regulators and authorities, particularly the National Privacy Commission.
• Practical experience in regulatory compliance, licensing, compliance audits, risk management and statutory reporting.
• Hands-on experience managing data breaches, privacy complaints, data subject requests and Privacy Impact Assessments.
• Ability to develop and implement compliance and data privacy policies, procedures and training programmes.
• Strong communication, stakeholder management, analytical and problem-solving skills.
• Professional certifications in compliance, data protection or privacy management will be an advantage.